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CISA 

CYBER+INFRASTRUCTURE 


Letter from the Assistant Director 

The cornerstone our democracy is a free and open society where citizens can 
enjoy a wide range of activities without fear of harm. People across the U.S 
should expect that they will be safe and secure as they cheer on a favorite team 
at a sporting event, shop at a mall, attend a house of worship, go to school, dine 
out with family and friends, or go to a concert. 

The Department of Homeland Security's Cybersecurity and Infrastructure 
Security Agency (CISA) works closely with publio and private sector 
stakeholders to mitigate risk to our infrastructure. This mission inoludes working 
to secure soft targets and crowded places In partnership with our stakeholders. 

Soft targets and crowded places—a term more recently used—are typically 
defined as locations or environments that are easily accessible, attract large numbers of people on a 
predictable or seml-predlotable basis, and may be vulnerable to attacks using simple tactics and readily 
available weapons. CISA works with stakeholders to increase security and reduce the risk of a suocessful 
attack-or, for those that do occur, limit the impacts to life and property. 

The "Security of Soft Targets and Crowded Places - Resource Guide" Is a key tool to our efforts to raise 
awareness of the capabilities that are available to support risk mitigation. The Guide provides an easy to 
use method to quiokly find information on a wide range of free oapabilities that oan be incorporated into 
the security practices of organizations of all sizes. I strongly encourage you to consider these capabilities 
as part of your risk mitigation strategy. 

As CISA's Assistant Director for Infrastructure Security, I assure you that we continue to work diligently 
to Identify innovative means through which we can collectively mitigate the risks we face as a nation 
generally, and those posed by terrorists and other violent extremist aotors to soft targets and orowded 
places specifically. Thank you for your partnership and commitment to securing our nation. 



Sinoerely, 



Brian Harrell 

Assitant Director for Infrastructure Security 
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1 Resource Matrix 


Segments of our society are inherently open to the general public, and by nature of their purpose do not incorporate 
strict security measures. Given the increased emphasis by terrorists and other extremist actors to leverage less 
sophisticated methods to inflict harm in public areas, it is vital that the public and private sectors collaborate to 
enhance security of locations such as transportation centers, parks, restaurants, shopping centers, special event 
venues, and similar facilities. Securing these locations is essential to preserving our way of life and sustaining the 
engine of our economy. The Infrastructure Security Division (ISD), part of the U.S. Department of Homeland Security 
(DHS) Cybersecurity and Infrastructure Security Agency (CISA), is committed to improving the security and resilience 
of soft targets by providing relevant tools, training, and programs to both the public and private sectors, and the 
general public. This guide is a catalog of ISD soft target resources, many of which were created in collaboration with 
our partners to ensure they are useful and reflective of the dynamic environment we live in. 


Legend: Type of Resource 

Fact Sheet 


Guide yp 


Informational yQ In-Person 
Materials aasaa Training 


Online 

Xl^ Training 


Tool 


Video 


□ Website 


OqO 

ITmH 


For Everyone 


CATEGORY 


RESOURCE 


TYPE 


Understand the Basics 


Tools and Resources to Help Businesses Plan, Prepare, and Protect from an 
Attack 



Identify Suspicious 
Behavior 


“If You See Something, Say Something" Campaign® Informational Video and Radio 
PSA 

“If You See Something, Say Something" Campaign® Informational Print Materials 
PSA 


Insider Threat Video 


Pathway to Violence Action Guide 


Pathway to Violence Video 



What’s in Store: Crdinary People, Extraordinary Events Video 


Protect Against 
Unmanned Aircraft 
Systems 


Unmanned Aircraft Systems (UAS) Critical Infrastructure Drone Pocket Card 


Indicators of Suspicious Unmanned Aircraft Systems (UASs) 


UAS Frequently Asked Ouestions 


Action Guide - Active Shooter Attacks: Security Awareness for Soft Targets and 
Crowded Places 

Action Guide - Chemical Attacks: Security Awareness for Soft Targets and 
Crowded Places 

Prepare and Respond to - 

Active Assailants Action Guide - Vehicle Ramming: Security Awareness for Soft Targets and 

Crowded Places 



Action Guide - Fire as a Weapon: Security Awareness for Soft Targets and 
Crowded Places 
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Legend: Type of Resource 



Fact Sheet 



■ I Informational djCH In-Person ^ i Online 

^ Materials asaas Training xL 7 Training 



I ► I Video 


□ 


Website 


CATEGORY 


RESOURCE 


TYPE 


Prepare and Respond 
to Active Assailants, 
continued 


Action Guide - Mass Gatherings: Take Charge of Your Personal Safety |j 

Is 

Active Shooter Booklet | 

p 

Active Shooter Preparedness Program Website 

Active Shooter Event Ouick Reference Guide | 

■ 

Active Shooter Poster | 

■ 

Active Shooter Pocket Card | 

p 

Cptions for Consideration Active Shooter Preparedness Video [ 

► 1 

Vehicle Ramming Attack Mitigation Video [ 

► 1 


Prevent and Respond to 
Bombings 


Security and Resiliency Guide for Countering-IEDs (SRG C-IED) and Annexes 



For Businesses 


CATEGORY 


Understand the Basics 


RESOURCE 


Business Continuity Planning Suite 


Independent Study Training Courses 


Critical Infrastructure Tabletop Exercise Program (CITEP) 


X 






Bomb-Making Materials Awareness Program (BMAP) 


Nationwide Suspicious Activity Reporting (SAR) Initiative - Private Sector 
Security Training 




No Reservations: Suspicious Behavior in Hotels Video 


Suspicious Behavior Advisory Posters 


in 


At-A-Glance Guide for Protecting Faith-Based Venues 


Identify Suspicious 
Behavior 


Check It! - Bag Check Video 

IX] 

Evacuation Planning Guide for Stadiums 

tel 

Patron Screening Best Practices Guide 

tel 

Protective Measures Guides 

tel 

Sports Venue Bag Search Procedures Guide 

tel 

Sports Venue Credentialing Guide 

tel 
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Legend: Type of Resource 



Fact Sheet 



B h Informational ] In-Person i Online 

Materials fiaasa Training Training 



I ► I Video 


□ Website 


CATEGORY 

RESOURCE 

TYPE 

Identify Suspicious 
Behavior, continued 

Vehicle-Borne Improvised Explosive Device (VBIED) Identification Guide 

Vehicle Inspection Guide 

Vehicle Inspection Video 

iN 

ifii 

► 

Protect Against 

Unmanned Aircraft 

Systems 

Unmanned Aircraft Systems: Addressing Critical Infrastructure Security 
Challenges 


III 

II II II 


Unmanned Aircraft Systems - Critical Infrastructure Video 

1 

► 

1 

Prepare and Respond to 
Active Assailants 

Active Shooter Preparedness In-Person Workshops 

lP 

n 

••••• 

Active Shooter Emergency Action Planning Guide 

ii 

1 

Active Shooter Emergency Action Planning Template 


Active Shooter Emergency Action Planning Video 

1 

► 

1 

Active Shooter Recovery Guide 

Ii 

Action Guide - Mass Gatherings: Security Awareness for Soft Targets and 

Crowded Places 

Ii 

Recovering From An Active Shooter Incident Action Guide 


III 

II II II 



Counter-IED and Risk Mitigation Training 


Sports and Entertainment Venues Bombing Prevention Solutions Portfolio 

IP 

Technical Resource for Incident Prevention (TRIPw/re) Website 



Prevent and Respond to 

What to Do - Bomb Threat Website 


Bombings 

Bomb Threat Procedures Checklist 

IP 


Bombing Prevention Lanyard Cards 

IP 


DHS-Department of Justice (DCJ) Bomb Threat Guidance 



What You Can Do When There is a Bomb Threat Video 

S 


Flomeland Security Information Network - Critical Infrastructure (FISIN-CI) 


Connect with CISA 

Regional Cffices 

X 


Assist Visits and the Infrastructure Survey Tool 

X 
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Uil For Government 


CATEGORY 

RESOURCE 

TYPE 

Protect, Screen, and Allow 
Access to Facilities 

Interagency Security Committee Best Practices for Mail Screening and Handling 

Processes 

til 

Occupant Emergency Programs: An Interagency Security Committee Guide 

ti 

Prepare and Respond to 
Active Assailants 

Planning and Response to an Active Shooter: An Interagency Security 

Committee Policy and Best Practices Guide 

ti 

Prevent and Respond to 
Bombings 

Multi-Jurisdictional Improvised Explosive Device (lED) Security Planning 

iP 

n A 

••••• 


Connect with CISA Interagency Security Committee 




For First Responders 


CATEGORY 

RESOURCE 

TYPE 

Protect, Screen, and 

Allow Access to Facilities 

Crisis Event Response and Recovery Access (CERRA) Framework 

ta 

Protect Against 





Unmanned Aircraft 
Systems 

Unmanned Aircraft Systems: Considerations for Law Enforcement 





Prevent and Respond to National Counter- Improvised Explosive Device Capabilities Analysis Database 
Bombings (NCCAD) 


n Ay 
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2 Resource Descriptions & Links 

This section inciudes brief descriptions of each of the avaiiabie resources and inciudes iinks to the 
resources or where you can find more information. 


Understand the Basics 

The foiiowing resources provide an introduction to faciiity security and can serve as a good first step 
for businesses. Resources inciude fact sheets, guidance, and oniine training and education courses 
that cover topics such as impiementing Criticai infrastructure Security and Resiiience Programs and 
Workpiace Security Awareness. 


Tools and Resources to Help Businesses 
Plan, Prepare, and Protect from an Attack 

Provides business owners and their empioyees 
with an overview of the Hometown Security 
initiative, specificaiiy how to appiy the four 
steps: Connect, Pian, Train, and Report to their 
workpiace and communities. The Hometown 
Security Report Series (HSRS) provides reports 
on community infrastructure and institutions, 
inciuding commerciai office buiidings, commuter 
raii systems, hoteis, hospitais, and institutes of 
higher education. The reports are one of the free 
toois and resources provided under the initiative. 

Link: httDs://www.dhs.aov/sites/defauit/ 
fiies/pubiications/Hometown-Securitv-Fact- 

Sheet-0406201 6-508.Ddf 


Link: https://www.dhs.aov/hometown-securitv 


Audience ^ 



Business Continuity Planning Suite 

Helps businesses create, improve, or update their 
business continuity plan to reduce the potential 
impact of a disruption to business. The suite 
includes business continuity planning training, 
business continuity and disaster recovery plan 
generators, and a business continuity plan 
validation. 

Link: https://www.readv.aov/business-continuitv- 
planning-suite 

Audience ^ Type ^ 


Independent Study Training Courses 

Provide individuals, businesses, first responders, 
and law enforcement with the information needed 
to improve security at their facilities. The self-paced, 
online courses hosted by the Federal Emergency 
Management Agency's (FEMA) Emergency 
Management Institute cover topics such as levels of 
protection and design-basis threat, active shooter, 
insider threat, workplace security, hidden hazards 
in retail spaces, and suspicious activity surveillance. 
All courses require a FEMA student identification 
number. For more information on howto register, 
please visit: https://cdp.dhs.gov/femasid/register. 

Link: https://trainina.fema.aov/is/ 

Audience A Q £St^ Type 

Critical Infrastructure Tabletop Exercise 
Program (CITEP) 

Assists the critical infrastructure community 
in conducting their own tabletop exercises by 
allowing users to leverage pre-built exercise 
templates and tailor them to their specific needs in 
order to assess, develop, and update emergency 
action plans, programs, policies and procedures. 
These resources provide exercise planners with 
tools, scenarios, question sets, and guidance to 
support the development of a discussion-based 
exercise. There are over 30 CITEP exercise 
templates, including ones for outdoor events and 
insider threats. 

Link: https://hsin.dhs.aov/ci/sites/exerciseinfo/ 
Paaes/CITEP Learnmore.aspx 

Audience Type 

sssss 
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Identify Suspicious Behavior 

These resources help all citizens, business owners and employees, and private sector security personnel 
understand what suspicious behaviors may pose a threat and what steps to take to report the behavior to 
authorities. 


Nationwide Suspicious Activity 
Reporting (SAR) Initiative - Private Sector 
Security Training 

Assists private sector security personnel in 
recognizing what kind of suspicious behaviors are 
associated with pre-incident terrorism activities, 
understanding how and where to report suspicious 
activities, and protecting privacy, civil rights, and 
civil liberties when documenting information. 

Link: https://nsi.ncirc.aov/hsDtreaistration/private 
sector/ 

Audience ^ Type 

No Reservations: Suspicious Behavior in 
Hotels Video 

Helps hotel employees identify and report 
suspicious activities and threats in a timely manner 
by highlighting the indicators of suspicious activity. 
The video is also available in Spanish. 

Link: httDs://www.dhs.aov/video/no-reservations- 
suspicious-behavior-hotels 

Audience ^ Type E] 

Suspicious Behavior Advisory Posters 

Serve as a quick-reference resource to 
help businesses, first responders, and local 
governments identify suspicious activities and 
behaviors and prevent the illicit sale of explosive 
precursor chemicals and components. The posters 
are available under the Suspicious Activities 
and Bomb Threats - What to Do section of the 
TRIPi/i//Te Website. 

Link: https://triDwire.dhs.aov/IED/resources/isp/ 
loainPopup2.isp 

Audience Type llp 


“If You See Something, Say Something” 
Campaign® 

Provides outreach materials such as posters, 
brochures, and Web graphics that can be 
provided to partners at no cost to help raise public 
awareness of the indicators of terrorism and 
terrorism-related crime. Also available are video 
and radio public service announcements to raise 
public awareness of the indicators of terrorism 
and terrorism-related crime. The public service 
announcements are available in English and 
Spanish, but the U.S. Department of Homeland 
Security (DHS) is able to work with partners to 
address specific language needs. The topics 
include Protect Your Everyday tor all citizens. 
Hospitality tor trave\ers and owners and operators 
of hotels, and Officials focused on the major sport 
leagues. 

Link: https://www.dhs.aov/see-somethina-sav- 
something/campaian-materials 

Audience Type Vi 

Pathway to Violence Action Guide 

Explains warning signs that may lead to violence 
and what individuals can do to mitigate a potential 
incident. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/dhs-pathwav-to-violence-09-15-16-508.pdf 

Audience Type 


Pathway to Vioience Video 

Identifies behavior indicators that assailants often 
demonstrate before a violent act based on expert 
research. The video describes the six progressive 
steps that may be observable by colleagues, 
engagement strategies, and recommended 
responses. 

Link: https://www.dhs.aov/pathwav-violence-video 
Audience Type [3 
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What's in Store: Ordinary People, 
Extraordinary Events Video 

Helps owners, managers, and staff at shopping 
centers and retail establishments identify 
and report suspicious activity and threats by 
highlighting the indicators of suspicious activity in 
retail settings. 

Link: https://www.dhs.aov/video/whats-store- 
ordinarv-people-extraordinarv-events 

Audience ^2^ Type [3] 

Insider Threat Video 

Discusses how insider threats manifest in a variety 
of ways including terrorism, workplace violence, 
and breaches of cybersecurity. The video can be 
found under the Insider Threat tab. 

Link: https://www.dhs.aov/insider-threat-mitiaation 
Audience Type I ^ I 


Bomb-Making Materials Awareness 
Program (BMAP) 

Serves as a source of continued information on 
Improvised Explosive Device (lED) materials, 
tactics, and Counter-IED Training. A Community 
Engagement Website serves as the dashboard 
for BMAP programs across the Nation to track, 
gather, and disseminate materials, successes, and 
lessons learned from the BMAP team’s instructor- 
led courses and site visits. 

Link: https://www.dhs.aov/bmap 
Audience 6 Type a » 


Protect, Screen, and Allow Access to Facilities 

Many large facilities want to screen patrons before allowing them to enter facilities, others may want 
employ a credentialing process. Resources in this section provide suggestions and guidance on how to 
put these programs in place. 


At-A-Glance Guide For Protecting Faith- 
Based Venues 

Lists the different resources available for houses 
of worship including security assessments, 
tabletop exercises, and other training. 

Link: https://www.fema.aov/faith-resources 
Audience Type 

Patron Screening Best Practices Guide 

Provides options for businesses to develop and 
implement patron screening procedures for major 
sporting events, concerts, horse races, award 
ceremonies, and similar gatherings. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/patron-screenina-auide-03-16-508.pdf 

Audience Type ill 


Check It! - Bag Check Video 

Provides information facility employees need 
to properly search bags to protect venues and 
patrons. 

Link: https://www.dhs.aov/video/check-it-baa- 
check-video 

Audience ^ Type Q 

Occupant Emergency Programs: An 
Interagency Security Committee Guide 

Provides important information to assist 
department and agency security planners as 
they develop and review Occupant Emergency 
Programs for the safety and security of employees 
and visitors. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/isc-occupant-emeraencv-proarams- 

quide-mar-2013-508.pdf 

Audience im Type|i 
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Evacuation Planning Guide for Stadiums 

Assists stadium owners and operators with 
preparing evaouation plans and helping to 
determine when and how to evacuate, shelter- 
in-place, or relocate stadium spectators and 
participants. It also Includes a template that can 
be used to create a plan that will incorporate the 
unique policies and procedures of state and local 
governments, surrounding communities, and 
specific stadium characteristics. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/evacuation-planning-auide- 

stadiums-508.pdf 

Audience ^ Type 

Protective Measures Guides 

Provide businesses with an overview of threats 
and offer suggestions for planning, coordinating, 
and training activities that contribute to a 
safe environment for guests and employees. 

The guides are For Official Use Only (FOUO), 
but businesses can request access to them 
through the Oommercial Facilities page of the 
Homeland Security Information Network- 
Critical Infrastructure (HSIN-CI), which requires 
registration to access. 

* Protective Measures Guide for U.S. Sports Leagues 

* Protective Measures Guide for the U.S. Lodging 
Industry 

* Protective Measures Guide for Mountain Resorts 

* Protective Measures Guide for Outdoor Venues 

* Protective Measures Guide for Commercial Real 
Estate 

Link: https://www.dhs.aov/commercial-facllities- 
publications 

Audience ^ Type 

Sports Venue Credentialing Guide 

Provides suggestions for developing and 
implementing credentialing procedures at public 
assembly venues that host professional sporting 
events. Venue owners, operators, and event 
organizers should use additional resources (e.g., 
law enforcement) when available to implement the 
procedures outlined in this guide. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/sports-venue-credentialina-auide-508.pdf 

Audience ^ Type |||g| 


Sports Venue Bag Search Procedures 
Guide 

Provides suggestions for developing and 
implementing bag search procedures at 
venues hosting major sporting events. Venue 
owners, operators, and event organizers should 
use additional resources (e.g., consult law 
enforcement) to implement the procedures 
outlined in this guide. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/sports-venue-baa-search-auide-508.pdf 

Audience 3 li 

Interagency Security Committee (ISC) 
Best Practices for Mail Screening and 
Handling Processes 

Provides mail center managers, their supervisors, 
and agency security personnel with a framework 
for understanding and mitigating risks posed to an 
organization by the mail and packages it receives 
and delivers on a daily basis. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/isc-mail-handlina-screening-nonfouo- 

sept-2012-508.pdf 

Audience SI Type iIbI 

Crisis Event Response and Recovery 
Access (CERRA) Framework 

Provides voluntary guidance for state, local, tribal, 
and territorial (SLTT) authorities for planning and 
developing an access management program. 

The framework provides mechanisms, tools, 
processes, and approaches for coordinating, 
approving, and enabling access during response 
and recovery operations. 

Link: https://www.dhs.aov/sites/default/ 

files/publications/Crisis%20Event%20 

Response%20and%20Recoverv%20Access%20 

%28CERRA%29%20Framework.pdf 

Audience 9 M Type 
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Vehicle-Borne Improvised Explosive 
Device Identification and Vehicle 
Inspection Guidance 

Assist stakeholders in identifying suspected 
Vehicle-Borne Improvised Explosive Device lEDs 
(VBIED) and provide instruction for vehicle search 
techniques for use by law enforcement, bomb 
squads, HAZMAT teams, and other emergency 
and professional security personnel involved with 


inspection of vehicles that may pose a terrorist 
bomb threat. The Vehicle Inspection Guide, 
Vehicle Inspection Video, and VBIED Identification 
Guide are all available to registered users on 
TRIPw/'/'e. 

Link: https://tripwire.dhs.aov/IED/appmanaaer/ 
lEDPortal/IEDDesktop? nfpb=true& 

paaeLabehLOGIN 

Audience mu Type 0 


Protect Against Unmanned Aircraft Systems (UAS) 

LIAS, also known as drones, can be used to benefit a community by transporting supplies or assisting 
search and rescue, but they can also be used for malicious purposes. The resources in this section 
provide an overview of this threat and steps businesses, the public, and first responders can take to 
protect against the malicious use of drones. 


Unmanned Aircraft Systems: Addressing 
Critical Infrastructure Security 
Challenges 

Provides an overview of the threats posed by UAS 
and actions that owners and operators can take to 
protect their facilities. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/uas-ci-challenaes-fact-sheet-508.pdf 

Audience ^ Type 

Unmanned Aircraft Systems Critical 
Infrastructure Drone Pocket Card 

Provides a quick reference guide for critical 
infrastructure security and operations officers and 
the general public on how to identify the different 
categories of UAS, how to report UAS activity 
including what information to share, and what 
actions to take to respond to a threat. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/uas-ci-drone-pocket-card-112017-508.pdf 

Audience Type Vi 

Unmanned Aircraft Systems Frequently 
Asked Questions 

Provides answers to common questions about the 
requirements and operation of UAS. 

Link: https://www.dhs.aov/unmanned-aircraft- 
svstems-fag 

Audience Type 


Unmanned Aircraft Systems - Critical 
Infrastructure Video 

Provides information on critical infrastructure 
challenges associated with the UAS threat, 
counter-UAS security practices, actions to 
consider for risk mitigation, and specific 
preparedness efforts for facilities and 
organizations. The video can be found under the 
UAS and Critical Infrastructure - Understanding 
the Risk tab. 

Link: https://www.dhs.aov/uas-ci 
Audience ^ Type El 

Unmanned Aircraft Systems: Indicators 
of Suspicious UAS 

Provides a reference aid to increase situational 
awareness for those who may encounter a 
suspicious UAS through the Office for Bombing 
Prevention (OBP) TRIPwire OSINT Team’s 
Emergency Responder Note (ERN). The 
document can be found under the Emergency 
Responder Notes (ERN) section. 

Link: https://tripwire.dhs.aov 

Audience 2^ Type □ 
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Unmanned Aircraft Systems: 

Considerations for Law Enforcement 

Provides an overview of LIAS and the legal and 
operational considerations for law enforcement before 
taking action, and a list of additional resources. 

Prepare and Respond to Active Assailants 

DHS provides a number of resources to help prepare for, and respond to, active assailant incidents, including 
in-person and online training, tools to prepare emergency action plans, and guidance on the actions to take 
during an incident. 


Link: https://www.dhs.aov/sites/default/ 
files/publications/uas-law-enforcement- 

considerations-508.pdf 

Audience Type [H 


Action Guide - Active Shooter Attacks: 
Security Awareness for Soft Targets and 
Crowded Places 

Lists potential active shooter warning signs, along 
with steps to take if an incident occurs. Helpful 
tips are included to assist in developing protective 
measures to mitigate future attacks. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/Active%20Shooter%20Attacks%20 

-%20Secu ritv%20Awa reness%20for%20ST-C P. PD F 

Audience ^2^ Type njlp| 

Action Guide - Chemical Attacks: 
Security Awareness for Soft Targets and 
Crowded Places 

Identifies potential scenarios and symptoms of 
possible chemical exposures. The guide also 
explains how individuals can respond to and 
mitigate against future attacks. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/Chemical%20Attacks%20-%20 

Securitv%20Awareness%20for%20ST-CP.PDF 

Audience Type n|g| 

Action Guide - Vehicle Ramming: 
Security Awareness for Soft Targets and 
Crowded Places 

Identifies warning signs that individuals planning 
a vehicle ramming attack may exhibit. The guide 
also includes suggested mitigation strategies and 
protective measures to consider. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/Vehicle%20Rammina%20-%20 

Securitv%20Awareness%20for%20ST-CP.PDF 

Audience Type 


Action Guide - Mass Gatherings: 
Security Awareness for Soft Targets 
and Crowded Places 

Identifies ways that businesses can prepare for 
and mitigate against future attacks, including 
protective measures that provide some basic 
actions for consideration. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/Mass%20Gatherinas%20-%20 

Secu ritv%20Awareness%20for%20ST-C P. PDF 

Audience ^ Type |||g| 

Action Guide - Fire as a Weapon: 
Security Awareness for Soft Targets and 
Crowded Places 

Serves as an awareness guide to help people 
identify potential indicators of an attack by use of 
fire and provides mitigation strategies and proper 
response procedures. 

Link: https://www.dhs.aov/sites/default/ 
files/publications/Action-Guide-Fire-as-a- 

Weapon-11212018-508.pdf 

Audience Type |||g| 

Action Guide - Mass Gatherings: Take 
Charge of Your Personal Safety 

Provides potential indicators of an attack on a mass 
gathering and identifies steps that individuals can 
take in response. 

Link: https://www.dhs.aov/sites/default/files/ 

publications/Mass%20Gatherinas%20-%20 

Take%20Charae%20of%20Your%20Personal%20 

Safetv.pdf 

Audience Type |||g| 
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Active Shooter Preparedness In-Person 
Workshops 

Features scenario-based workshops with facilitated 
discussions to engage private seotor professionals 
and law enforcement representatives from federal, 
state, and local agencies to learn how to prepare for, 
and respond to, an aotive shooter situation. Through 
the course of the exercises, participants evaluate 
current response concepts, plans, and capabilities for 
coordinated responses to active shooter incidents. 

Link: https://www.dhs.aov/active-shooter-workshop- 

participant 

Audience A Typeie 

^ ^ &&&&& 

Active Shooter Emergency Action Planning 

Describes the fundamental concepts of developing 
an Emergenoy Aotion Planning (EAP) for an aotive 
shooter scenario, inoluding important oonsideration 
of EAP development. 

• Video: guides viewers through important 
oonsiderations of EAP development through the 
first-hand perspectives of active shooter survivors, 
first responder personnel, and other subject matter 
experts who share their unique insight. 

Link: https://www.dhs.aov/active-shooter- 
emeraencv-action-plan-video 

• Guide: provides the information needed to develop 
an Emergency Action Plan. 

Link: https://www.dhs.aov/sites/default/files/ 
publioations/active-shooter-emeraencv-aotion- 

plan-112017-508v2.pdf 

• Template: provides the framework for businesses 
to create their own Emergenoy Action Plan. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/active-shooter-emergencv-action- 

plan-template-112017-508.pdf 

Audience A Type [2] ^ 

Vehicle Ramming Attack Mitigation Video 

Provides information to assist in mitigating the threat 
of vehiole ramming attacks with technical analysis 
from public and private sector subject matter 
experts. The video leverages real-world events, and 
provides recommendations aimed at protecting 
organizations as well as individuals against a 
potential vehicle ramming incident. 

Link: https://www.dhs.aov/private-citizen 

Audience Type |^| 


Active Shooter Preparedness Resource 
Materials 

Assist businesses, government offioes, and sohools 
in preparing for, and responding to, an aotive shooter. 
These resources are also available in the following 
languages: Arabic, Chinese, Korean, Punjabi, Russian, 
Somali, Spanish, and Urdu. 

• Active Shooter Booklet: provides information on 
how to respond to an active shooter in your vicinity, 
how to reaot when law enforcement arrives, and 
how to train staff and prepare for an active shooter 
situation, including roles and responsibilities. 

Link: https://www.dhs.aov/xlibrarv/assets/active 
shooter booklet.pdf 

• Active Shooter Event Quick Reference Guide: 
provides key information in a shorter, easy-to-read 
format. 

Link: https://www.dhs.gov/sites/default/files/ 
publications/active-shooter-pamphlet-2017-508.pdf 

• Active Shooter Poster: highlights key information 
for how to respond when an active shooter is in 
your vicinity. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/active-shooter-poster-2017-508.pdf 

• Active Shooter Pocket Card: contains all the 
information needed to respond to an active 
shooter in an accessible format. 

Link: https://www.dhs.aov/sites/default/files/ 
publioations/active-shooter-pocket-card-508.pdf 

• Planning and Response to an Active Shooter: 

An Interagency Security Committee Policy and 
Best Practices Guide: includes helpful information 
and best practices for federal agencies that can 
be applied more broadly by anyone who may be 
involved in an aotive shooter situation. 

Link: https://www.dhs.aov/sites/default/files/ 
publications/isc-planning-response-active- 

shooter-auide-non-fouo-nov-2015-508.pdf 

• Options for Consideration Active Shooter 
Preparedness Video: demonstrates possible 
actions to take if confronted with an active shooter 
soenario. The video also shows how to assist 
authorities once law enforcement enters the scene. 
Link: https://www.dhs.aov/options-consideration- 
active-shooter-preparedness-video 

Audience Type njlp| |-^| llB 
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Active Shooter Recovery Materials 

Help organizations proaotively put in plaoe polioies 
and prooedures to help effeotively reoover from an 
active shooter incident while providing a support 
structure for all involved. 

• Active Shooter Recovery Guide: outlines what 
to do in the short-term and long-term to aid in 
recovery. 

Link: https://www.dhs.aov/sites/default/ 
files/publications/active-shooter-recoverv- 

auide-08-08-2017-508.pdf 

• Recovering From An Active Shooter Incident 
Action Guide: provides information on how to 
establish a recovery process and breaks down 
necessary actions for short-term and long-term 


recovery following an active shooter incident. 
Link: https://www.dhs.aov/sites/default/files/ 
publications/recovering-from-an-active-shooter- 

incident-fact-sheet-08-08-2017-508.pdf 



Active Shooter Preparedness Program 
Website 

Provides access to a number of DHS products, tools, 
and resources to help everyone prepare for and 
respond to an active shooter incident. 

Link: https://www.dhs.aov/active-shooter- 
preparedness 

Audience Type 


Prevent and Respond to Bombings 

The resources in this section are designed to increase the capabilities of everyone—the public, business 
owners and staff, government employees, law enforcement, and first responders—to prevent, protect 
against, and respond to bombing incidents. The resources include an easy-to-use checklist, planning 
assistance, in-person and online training, materials and videos that provide guidance, and an online network 
to access additional resources and share information. 


Technical Resource for Incident 
Prevention (TRIPi/v/re) Website 

Serves as a 24/7 online, collaborative 
information-sharing network for bomb squads, 
first responders, military personnel, government 
officials, intelligence analysts, and security 
professionals. Developed and maintained 
by the Office for Bombing Prevention (OBP), 
TRIPi/i/Zre combines expert analyses and reports 
with relevant documents, images, and videos 
gathered directly from terrorist source materials 
to help users anticipate, identify, and prevent 
I ED incidents. TRIPw/re requires registration to 
access information, or partners can log-in using 
their HSIN account. To login, please visit: https:// 
tripwire.dhs.aov/IED/appmanaaer/IEDPortal/ 

lEDDesktop? nfpb=true& paaeLabehLOGIN 

Link: https://www.dhs.aov/sites/default/files/ 
publications/obp-tripwire-fact-sheet-2016-508.pdf 


Overview Video: https://tripwire.dhs.aov/IED/ 
resources/isp/tripwireVideo.isp 


Audience 


QISI Type 


Sports and Entertainment Venues Bombing 
Prevention Solutions Portfolio 

Provides information on and direct access to the 
trainings, products, and resources that support sports 
and entertainment organizations and venues with 
building counter-IED capabilities. The interactive 
product connects leadership within these organizations 
to the counter-IED resources that meet their needs, and 
empowers all venue personnel to play a role in security. 

Link: https://tripwire.dhs.aov/IED/resources/docs/ 
Sports%20Entertainment%20Venue%20Bombing%20 

Prevention%20Solutions%20Portfolio.pdf 

Audience ad Type mXEidsi 

What to Do - Bomb Threat Website 

Provides guidance and resources including in- 
depth procedures for responding to bomb threats 
or encounters with suspicious items or behaviors 
and provides information to help prepare and react 
appropriately during these events. The Website also 
provides information regarding other planning and 
preparedness resources. 

Link: https://www.dhs.aov/what-to-do-bomb-threat 
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• DHS-DOJ Bomb Threat Guidance: provides 
detailed information on how to assess and react 
to a threat. 

Link: httDs://tripwire.dhs.aov/IED/resources/docs/ 
OBP DHS DOJ Bomb Threat Guidance.pdf 

• Bomb Threat Procedures Checklist: provides 
basic procedural guidelines and a checklist to 
document important information if a bomb threat 
is received. 

Link: https://tripwire.dhs.aov/IED/resources/docs/ 

DHS%20Bomb%20Threat%20Checklist.pdf 

• What You Can Do When There is a Bomb Threat 
Video: demonstrates how to specifically respond 
to a phoned in bomb threat and was developed 
in partnership with the University of Central 
Florida and the International Association of 
Chiefs of Police (lACP). 

Link: https://www.dhs.aov/what-to-do-bomb- 
threat 

• Bombing Prevention Lanyard Cards: provide 
quick-reference information and key reminders 
to empower action, both on the job every day 
and in the event of an incident. 

Link: https://tripwire.dhs.aov/IED/resources/ 
docs/Bombina%20Prevention%20Lanvard%20 

Cards%20(Lined%20Version).pdf 

Audience Type 

Multi-Jurisdictional Improvised Explosive 
Device Security Planning (MJIEDSP) 
Program 

Assists communities with collectively identifying roles, 
responsibilities, and capability gaps; and optimizing 
limited resources within a multi-jurisdictional planning 
area. The MJIEDSP process includes coordination with 
stakeholders in an area to conduct familiarization briefs 
and training, data collection activities, and facilitated 
scenario-based workshops. 

Link: https://www.dhs.aov/miiedsp 

Audience iSl ^ Q Type 

Counter-IED and Risk Mitigation Training 

Provides participants—including municipal 
officials and emergency managers, state and local 
law enforcement and other emergency services, 
critical infrastructure owners and operators. 


and professional security personnel—with general 
information and strategies to prevent, protect against, 
respond to, and mitigate bombing incidents. 

To request direct delivery trainings, please contact 
your local Protective Security Advisor (PSA) or email 
OBP@ hg.dhs.gov for additional information. For more 
information, or for a full list of Counter-IED and Risk 
Mitigation trainings, visit the Counter-IED Training 
Courses Website or the Counter-IED & Risk Mitigation 
Training Factsheet. 

Link: https://www.dhs.aov/bombina-prevention- 
training-courses 

Fact sheet: https://www.dhs.aov/sites/default/files/ 
publications/obp-trainina-fact-sheet-2017-508.pdf 

Audience Type 

National Counter-Improvised Explosive 
Device (lED) Capabilities Analysis Database 
(NCCAD) 

Provides an assessment program managed by the 
Office for Bombing Prevention (OBP) that uses a 
consistent and repeatable methodology to assess 
and analyze the capabilities of units with a counter- 
lED mission throughout the United States. NCCAD 
assessments measure the capabilities of and 
identify gaps in Personnel, Organization, Equipment, 
Training, and Exercises (POETE) required for effective 
prevention, protection, and response to lED threats. 

Link: https://www.dhs.aov/nccad 
Audience ^ ^ Type ^ 

Security and Resiliency Guide for 
Countering-IEDs (SRG C-IED) and Annexes 

Provide individuals, businesses, first responders, 
and law enforcement with guidance to enhance their 
preparedness for potential lED incidents in their 
communities. The guide includes lED risk information, 
a framework of 10 common C-IED preparedness 
goals, planning considerations, and available federal 
resources. The guide is complemented by four annexes 
with additional information relevant to venues at high 
risk of lED-related incidents: lodging, outdoor events, 
public assembly, and sports leagues and venues. 

Link: httos://www.dhs.aov/oublication/securitv-and- 

resiliencv-guide-and-annexes 

Audience Type ||||]| 
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Connect with CISA 

This section iists ways that businesses; first responders; and state, iocai, tribai, and territoriai governments 
can access not oniy the resources iisted in this guide, but additionai resources avaiiabie through CiSA. These 
resources can heip identify the toois, resources, and training that are right for each faciiity and its risks. 


National Infrastructure Coordinating 
Center (Nice) 

Serves as the dedicated 24/7 coordination 
and information sharing operations center that 
maintains situationai awareness of the Nation's 
criticai infrastructure. For more information, please 
email NICC@hq.dhs.aov . 

Link: https://www.dhs.aov/cisa/national- 
infrastructure-coordinating-center 

Audience m a Type SX 

Regional Offices 

Engage with state, local, tribal, and territorial 
(SLTT) government partners, businesses, and 
critical infrastructure owners and operators in 
their regions to provide access to steady-state 
DHS risk-mitigation tools, products, and services, 
such as training and voluntary vulnerability 
assessment programs. 

The 10 Regional Offices also support National 
Special Security Events (NSSEs) and Special 
Event Assessment Rating (SEAR) events; support 
response to all-hazard incidents through field- 
level coordination and information sharing; and 
provide expertise on reconstituting affected 
critical infrastructure. 

• Regional Office Fact Sheet: https://www.dhs. 
gov/sites/default/files/publications/IP-Reoional- 

Enhancement-Fact-Sheet-508-F.pdf 

• Regional Office Website: https://www.dhs.aov/ 
node/29611 

• Protective Security Advisor (PSA) Program 
Fact Sheet: https://www.dhs.oov/sites/ 
default/files/publications/PSA-Prooram-Fact- 

Sheet-05-15-508.pdf 

AudiencelJ^^ Type^H] 


Homeland Security Information Network 
- Critical Infrastructure (HSIN-CI) 

Serves as the primary information-sharing 
platform between the critical infrastructure 
sector stakeholders and government. HSIN-CI 
enables federal, state, local, and private sector 
critical infrastructure owners and operators to 
communicate, coordinate, and share sensitive and 
sector-relevant information to protect their critical 
assets, systems, functions, and networks at no 
charge to sector stakeholders. To request access to 
HSIN-CI, please contact hsinci@ha.dhs.aov . 

Link: https://www.dhs.aov/hsin-critical- 
infrastructure 

Audience ^ iSl Type 

Interagency Security Committee (ISC) 

Develops policies, standards, and 
recommendations related to the security of 
nonmilitary federal facilities across the Nation. The 
ISC does this by, with, and through its members. 

Link: https://www.dhs.aov/about-interaaencv- 
securitv-committee 

Audience ]Sl Type 

Assist Visits and the Infrastructure 
Survey Tool 

Informs critical infrastructure owners and operators 
of the importance of their facilities, how they fit 
into the broader critical infrastructure sector, 
and provides an overview of the CISA resources 
available to help enhance security and resilience. 
The visits, conducted by PSAs with critical 
infrastructure facility representatives, help build 
relationships and increase communications. Cne of 
the CISA resources available to facility owners and 
operators is the Infrastructure Survey Tool (1ST). 

Assist visits: https://www.dhs.aov/assist-visits 
Infrastructure Survey Tool: https://www.dhs.oov/ 
infrastructure-survev-tool 

Audience ^ Type [||] 
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3 Contacts 


KEY CONTACTS 

AGENCY/DIVISION/PROGRAM 

PHONE/EMAIL 

WEBSITE 

INFORMATION PROVIDED 

National Infrastructure 
Coordinating Center 

NICC(5)ha.dhs.aov 

httDs://dhs.aov/ 

national-infrastructure- 

coordinatina-center 

For more information about the NIOC 

Regional Offices 

Please see 

Website for contact 
information 

htt DS: //WWW. d h s .a ov/ 

node/29611 

For more information on the Regional 
Offices, including locations, services, and 
contact information for each region 

ADDITIONAL CONTACTS 

AGENCY/DIVISION/PROGRAM 

PHONE/EMAIL 

WEBSITE 

INFORMATION PROVIDED 

Active Shooter 

Preparedness Program 

ASworkshop(a) 

hq.dhs.QOv 

https://www.dhs. 
a 0 v/a ct i ve -s h 0 ote r- 

preparedness 

For information on Active Shooter 
Preparedness workshops and materials 

Commercial Facilities 
Sector-Specific Agency 

CFSteam@ha.dhs. 

gov 

httDs://www.dhs.aov/ 

commercial-facilities- 

sector 

For more information on available DFIS 

resources 

Homeland Security 

Information Network- 
Critical Infrastructure 

hsinci(5)hq.dhs.aov 

https://www.dhs.aov/hsin- 

critical-infrastructure 

To request access to FISIN-CI include the 
following information: name, company, 
official email address, supervisor’s 
name and phone number, and critical 
infrastructure sector 

Insider Threat Mitigation 

InTMitigation® 

httDs://www.dhs.aov/ 

For information on Insider Threat 

Program 

hq.dhs.gov 

insider-threat-mitiaation/ 

Mitigation 

Interagency Security 
Committee 

isc.dhs.aov(a)hq.dhs. 

gov 

https://www.dhs.aov/ 

interaaencv-securitv- 

committee 

For more information on policies, 
standards, and best practices that can be 
applied 

National Counter-Improvised 
Explosive Device Capabilities 
Analysis Database 

nccad(a)ha.dhs.aov 

www.dhs.aov/nccad 

For more resources on NCCAD program. 

Office for Bombing 

Prevention 

OBP@ha.dhs.aov 

httDs://www.dhs.aov/obD 

For more information on resources or to 
request training 

Soft Target 

Security 

Softtaraetsecuritv@ 

ha.dhs.aov 

httDs://www.dhs.aov/ 

securina-soft-taraets-and- 

crowded-soaces 

For more information on soft target 
security resources 

TRIPw/re Help Desk 

1-866-987-9473; 

TRIPwirehelD@dhs. 

gov 

httDs://triDwire.dhs.aov 

TRIPw/re is available at no cost to 
registered subscribers and now also 
features a public-access homepage with 
valuable preparedness information for the 
whole community 
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